{"metadata": {"vulnerability": "CVE-2021-3781", "count": 54, "kinds": {"milestone": 12, "sighting": 4, "kev": 0, "other": 38}}, "data": [{"timestamp": "2021-09-08T01:28:24Z", "date_only": false, "value": "2021-09-08T01:28:24Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-3781", "record": "UBUNTU-CVE-2021-3781", "field": "published"}, {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-3781", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-15T08:17:48Z", "date_only": false, "value": "2021-09-15T08:17:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:3044-1", "record": "OPENSUSE-SU-2021:3044-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-09-15T08:17:48Z", "date_only": false, "value": "2021-09-15T08:17:48Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:3044-1", "record": "OPENSUSE-SU-2021:3044-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-09-15T08:17:48Z", "date_only": false, "value": "2021-09-15T08:17:48Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:3044-1", "record": "OPENSUSE-SU-2021:3044-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-09-15T08:17:48Z", "date_only": false, "value": "2021-09-15T08:17:48Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:3044-1", "record": "OPENSUSE-SU-2021:3044-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-09-15T08:18:20Z", "date_only": false, "value": "2021-09-15T08:18:20Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:3044-1", "record": "SUSE-SU-2021:3044-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-09-15T08:18:20Z", "date_only": false, "value": "2021-09-15T08:18:20Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:3044-1", "record": "SUSE-SU-2021:3044-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-09-15T08:18:20Z", "date_only": false, "value": "2021-09-15T08:18:20Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:3044-1", "record": "SUSE-SU-2021:3044-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-09-15T08:18:20Z", "date_only": false, "value": "2021-09-15T08:18:20Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:3044-1", "record": "SUSE-SU-2021:3044-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-09-16T08:03:53Z", "date_only": false, "value": "2021-09-16T08:03:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1273-1", "record": "OPENSUSE-SU-2021:1273-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-09-16T08:03:53Z", "date_only": false, "value": "2021-09-16T08:03:53Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1273-1", "record": "OPENSUSE-SU-2021:1273-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-09-16T08:03:53Z", "date_only": false, "value": "2021-09-16T08:03:53Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1273-1", "record": "OPENSUSE-SU-2021:1273-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-09-16T08:03:53Z", "date_only": false, "value": "2021-09-16T08:03:53Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1273-1", "record": "OPENSUSE-SU-2021:1273-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-09-21T14:30:47Z", "date_only": false, "value": "2021-09-21T14:30:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:3180-1", "record": "SUSE-SU-2021:3180-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-09-21T14:30:47Z", "date_only": false, "value": "2021-09-21T14:30:47Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:3180-1", "record": "SUSE-SU-2021:3180-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-09-21T14:30:47Z", "date_only": false, "value": "2021-09-21T14:30:47Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:3180-1", "record": "SUSE-SU-2021:3180-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-09-21T14:30:47Z", "date_only": false, "value": "2021-09-21T14:30:47Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:3180-1", "record": "SUSE-SU-2021:3180-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-16T00:00:00Z", "date_only": false, "value": "2022-02-16T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-3781", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-16T19:15:00Z", "date_only": false, "value": "2022-02-16T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GF7Q-R6FF-XWG6", "record": "GHSA-GF7Q-R6FF-XWG6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-16T19:15:00Z", "date_only": false, "value": "2022-02-16T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-3781", "record": "GSD-2021-3781", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-16T19:15:08.817Z", "date_only": false, "value": "2022-02-16T19:15:08.817", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-3781", "record": "FKIE_CVE-2021-3781", "field": "published"}, {"timestamp": "2022-02-16T22:36:32Z", "date_only": false, "value": "2022-02-16T22:36:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/37626", "record": "CVE-2021-3781", "field": "creation_timestamp", "uuid": "fa03abb6-07d2-45ab-8f3a-00151f52771a", "content": "\u203c CVE-2021-3781 \u203c\n\nA trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/37626"}, {"timestamp": "2022-02-17T00:00:27Z", "date_only": false, "value": "2022-02-17T00:00:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GF7Q-R6FF-XWG6", "record": "GHSA-GF7Q-R6FF-XWG6", "field": "published"}, {"timestamp": "2022-03-07T11:04:50Z", "date_only": false, "value": "2022-03-07T11:04:50Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-1560", "record": "OESA-2022-1560", "field": "published"}, {"timestamp": "2022-11-22T00:00:00Z", "date_only": false, "value": "2022-11-22T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2021-3781", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-22T06:30:14Z", "date_only": false, "value": "2022-11-22T06:30:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GF7Q-R6FF-XWG6", "record": "GHSA-GF7Q-R6FF-XWG6", "field": "modified"}, {"timestamp": "2023-06-26T18:56:00Z", "date_only": false, "value": "2023-06-26T18:56Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-3781", "record": "GSD-2021-3781", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-08-31T12:15:44.159Z", "date_only": false, "value": "2023-08-31T12:15:44.159092Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2021-3781", "record": "BELL-CVE-2021-3781", "field": "published"}, {"timestamp": "2023-08-31T12:15:44.159Z", "date_only": false, "value": "2023-08-31T12:15:44.159095Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2021-3781", "record": "BELL-CVE-2021-3781", "field": "modified"}, {"timestamp": "2023-08-31T12:15:44.159Z", "date_only": false, "value": "2023-08-31T12:15:44.159095Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2021-3781", "record": "BELL-CVE-2021-3781", "field": "withdrawn"}, {"timestamp": "2023-12-13T01:23:34.855Z", "date_only": false, "value": "2023-12-13T01:23:34.855283Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-3781", "record": "GSD-2021-3781", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10783-1", "record": "OPENSUSE-SU-2024:10783-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10783-1", "record": "OPENSUSE-SU-2024:10783-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10783-1", "record": "OPENSUSE-SU-2024:10783-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10783-1", "record": "OPENSUSE-SU-2024:10783-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-03T17:09:08.668Z", "date_only": false, "value": "2024-08-03T17:09:08.668Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-3781", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T17:09:08.668Z", "date_only": false, "value": "2024-08-03T17:09:08.668Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-3781", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-04T14:45:29Z", "date_only": false, "value": "2024-10-04T14:45:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4649", "record": "CVE-2021-3781", "field": "creation_timestamp", "uuid": "0c54ee11-61fd-4355-8e6c-12520925bafa", "content": "#exploit\n1. CVE-2021-28079:\nJamovi &lt;=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. CVE-2021-3781:\nGhostscript sandbox bypass\nhttps://security.tencent.com/index.php/blog/msg/205", "url": "https://t.me/CyberSecurityTechnologies/4649"}, {"timestamp": "2026-04-22T07:39:49Z", "date_only": false, "value": "2026-04-22T07:39:49Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-3781", "record": "UBUNTU-CVE-2021-3781", "field": "modified"}, {"timestamp": "2026-06-17T04:05:45.050Z", "date_only": false, "value": "2026-06-17T04:05:45.050", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-3781", "record": "FKIE_CVE-2021-3781", "field": "lastModified"}, {"timestamp": "2026-08-06T11:04:50Z", "date_only": false, "value": "2026-08-06T11:04:50Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-1560", "record": "OESA-2022-1560", "field": "modified"}, {"timestamp": "2026-09-01T17:00:36.541Z", "date_only": false, "value": "2026-09-01T17:00:36.541658Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4726", "record": "CVE-2021-3781", "field": "creation_timestamp", "uuid": "18df896b-ac39-43bd-afe1-f8d8a8d54644", "content": "exploit\n1. CVE-2021-28079:\nJamovi &lt;=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "url": "https://t.me/cissp/4726"}, {"timestamp": "2026-09-10T15:00:06.652Z", "date_only": false, "value": "2026-09-10T15:00:06.652069Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4726", "record": "CVE-2021-3781", "field": "creation_timestamp", "uuid": "b4facf29-3d9e-419f-9eb4-914286d60273", "content": "exploit\n1. CVE-2021-28079:\nJamovi &lt;=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "url": "https://t.me/cissp/4726"}, {"timestamp": "2026-09-20T14:05:28Z", "date_only": false, "value": "2026-09-20T14:05:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:3044-1", "record": "SUSE-SU-2021:3044-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T14:05:28Z", "date_only": false, "value": "2026-09-20T14:05:28Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:3044-1", "record": "SUSE-SU-2021:3044-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T14:05:45Z", "date_only": false, "value": "2026-09-20T14:05:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:3180-1", "record": "SUSE-SU-2021:3180-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T14:05:45Z", "date_only": false, "value": "2026-09-20T14:05:45Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:3180-1", "record": "SUSE-SU-2021:3180-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:29:12Z", "date_only": false, "value": "2026-09-20T19:29:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1273-1", "record": "OPENSUSE-SU-2021:1273-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:29:12Z", "date_only": false, "value": "2026-09-20T19:29:12Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1273-1", "record": "OPENSUSE-SU-2021:1273-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:34:49Z", "date_only": false, "value": "2026-09-20T19:34:49Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:3044-1", "record": "OPENSUSE-SU-2021:3044-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:34:49Z", "date_only": false, "value": "2026-09-20T19:34:49Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:3044-1", "record": "OPENSUSE-SU-2021:3044-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:05:31Z", "date_only": false, "value": "2026-09-20T20:05:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10783-1", "record": "OPENSUSE-SU-2024:10783-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:05:31Z", "date_only": false, "value": "2026-09-20T20:05:31Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10783-1", "record": "OPENSUSE-SU-2024:10783-1", "field": "document.tracking.current_release_date"}]}
